Unable to view flow image from K2 reports workspace

Hi

I have a problem with K2.NET 2003 SP1 where I am unable to view the flow in the K2 dashboard. (There are reasons I am not using higher service packs but that is out of scope here).

I have been asked by the support person (who really tried to assist - thanks) to post to the forum so that someone may be able to help me.

The server setup is as follows:
Dual Intel Xeon 3.6GHz with Hyperthreading
3GB RAM
MS Windows Server 2003 SP1
K2.NET 2003 SP1
.NET Framework 1.1 (and 2.0 - the group policies seem to automatically install this).
The solution does not use Sharepoint Portal Server at all.
The solution uses Kerberos authentication as credentials need to be passed over more than one hops.
K2.NET 2003 uses ADAM (ActiveDirectory Application Mode) for security using the ADAMUM.dll (for K2.NET 2003 SP1) provided by SourceCode.
The server is setup to use Kerberos authentication on all web sites and web services.
This is confirmed to be working as the K2 Console server shows Kerberos
authentication is being used.
The databases are located on a SQL instance in a SQL cluster.

K2 behaves as expected (can start workflows, manage workflows, email via SMTP, calls web services etc).

The problem is related to viewing the flow image in the K2 dashboard. This is normally done as follows (on the server hosting K2 although the same issue is experienced when connecting via another machine):

1. Connect to "http://localhost/K2V3/Workspace/Report.aspx"
2. Select a process (prefereably one you were involved with).
3. Click the "View Flow" icon.
4. No image is shown (only an icon containing a red square, green circle and blue triangle).

I have followed all the knowledge base articles and support forum information:
1. Support Request
a) .NET 1.1 was installed.
b) Installed .NET 1.1 SDK as requested by support (did not make a difference).

2. KB000019 (Viewflow not doisplaying correctly)
a) Virtual directory script permissions are "Scripts Only".
b) .NET security policy for "My ComputerRuntime Security
PoliciesMachineCode GroupsAll Code" is set to "Full Trust".
c) Authenticated users have been given "Full Control" over the "C:<Windows Directory>Microsoft.NETFramework<Current Framework Directory>Temporary ASP.NET Files" folder (this is after "Write" permissions did not make a difference).

3. http://forum.k2workflow.com/viewtopic.php?t=932
a) .NET 1.1 is installed on the server but the image will not show.
b) Full trust is already setup.

4. http://forum.k2workflow.com/viewtopic.php?t=722
a) The server running the K2 workspace has been added to the list of "Trusted Sites" in IE (which has less restrictions than "Local Intranet").
b) KB000098 (K2.NET 2003 on Windows 2003 Server SP1)
(i) The K2 service account (domain account) has a SPN entry set so it is trusted for delegation.
(ii) I do not get a Authentication with the server failed error in the K2 service manager.
(iii) I do not get any of the following errors: Authentication with the server failed , The request failed with HTTP status 401: Unauthorized. , or Workspace loads with username set to NT Authority/Anonymous logon .
(iv) I can export to the K2 server without any errors.

5. http://forum.k2workflow.com/viewtopic.php?t=61
a) Authenticated users have "Full Control" over the "C:<Windows Directory>Temp" folder (this is after "Write" permissions did not make a difference).
b) The server running the K2 workspace has been added to the list of "Trusted Sites" in IE (which has less restrictions than "Local Intranet").
c) If I right-click where the flow image is supposed to be and "View Source", I can see the XML data that's supposed to be shown as an image.

6. KB000123 (Kerberos)
a) Kerberos is working correctly as the K2 server console shows that Kerberos authentication is being used to interact with K2.
(i) Our solution uses a .NET web application that calls a .NET web service which starts the K2 process.

Other Notes:
The same setup on a standalone virtual server works and shows the flow image. The difference in the production environment is the database server and domain controller are split off from the K2 server.

Does anyone know how to solve this problem?

Is there any way of getting more information from the workspace or services so that debugging this is easier?

I've attached a screenshot of the workspace and a sample of the source of the ViewFlow frame.